What is the difference between an audit programme and an audit plan?

The audit programme defines which audits take place over a period (usually a year) – areas, frequency, methods and responsibilities. The audit plan describes a single audit: scope, criteria, schedule and logistics.

Which standard covers how audits are conducted?

Management system standards require internal audits in clause 9.2. ISO 19011 (guidelines for auditing management systems) describes how audits are conducted.

Can I audit several standards at once?

Yes. In an integrated audit, the shared requirements of several standards are audited together. IMScheck supports this with checklists whose items can be mapped to clauses.

Deutsche Version

Audit management – from audit plan to effective action

Audit management covers everything around internal and external audits: planning, checklists, execution, findings and following up on actions. IMScheck groups each audit into one collection – with a centrally maintained checklist, rated audit items, findings and the actions derived from them, all recorded in an audit trail.

Start the free maturity check Explore IMScheck PRO

BETALaunch phase: IMScheck PRO is free until Jan 1, 2027 – full version, full security.

How IMScheck supports your audit management

Each audit is a collection: documents, checklist, findings and actions belong together.
Centrally maintained checklist templates per audit type; items rated conforming, nonconforming, open or not applicable.
One click turns an audit item into a finding, and a finding into an improvement action.
Actions with owner and deadline, closed only after an effectiveness check.
A complete audit trail – traceable for auditors.

What does audit management include?

ISO management system standards require an internal audit programme in clause 9.2: audits are planned, carried out against defined criteria and scope, results are reported, and necessary corrective actions are taken without undue delay. ISO 19011 provides guidance on how to conduct audits.

In practice, audit management has four steps: define the audit programme and audit plan, run the audit with a checklist, record and classify findings, and follow actions through to proven effectiveness.

Typical problems without a system

Checklists in Word, findings in the audit report, actions in a spreadsheet: by the next audit nobody has the full picture, open items get lost, and proving effectiveness turns into a search exercise.

Audit management with IMScheck

Each audit is a collection: documents, findings and actions belong together and stay together.

Centrally maintained checklist templates (e.g. “Quality ISO 9001” or “Controlling”) are attached per audit type. Each item is rated conforming, nonconforming, open or not applicable – with a note.

A finding (nonconformity, observation, improvement opportunity) is created from an item in one click, and an action from the finding – with owner, due date and effectiveness review.

Every change is recorded in a tamper-evident audit trail. All data is stored in the EU (Frankfurt) – a clear advantage for organisations subject to the GDPR.

Frequently asked questions

What is the difference between an audit programme and an audit plan?: The audit programme defines which audits take place over a period (usually a year) – areas, frequency, methods and responsibilities. The audit plan describes a single audit: scope, criteria, schedule and logistics.
Which standard covers how audits are conducted?: Management system standards require internal audits in clause 9.2. ISO 19011 (guidelines for auditing management systems) describes how audits are conducted.
Can I audit several standards at once?: Yes. In an integrated audit, the shared requirements of several standards are audited together. IMScheck supports this with checklists whose items can be mapped to clauses.